Brainstorm Force SureForms

• CVE-2026-120842 Medium 5.3 WordPress SureForms plugin <= 2.13.0 - Broken Access Control vulnerability –
• CVE-2026-116387 Medium 5.3 WordPress SureForms plugin <= 2.12.9 - Broken Access Control vulnerability 0.2%
• CVE-2026-116402 Medium 5.3 WordPress SureForms plugin <= 2.12.9 - Content Injection vulnerability 0.3%
• CVE-2026-108495 Medium 6.5 WordPress SureForms plugin <= 2.12.7 - Cross Site Scripting (XSS) vulnerability 0.1%
• CVE-2026-85308 Medium 5.3 WordPress SureForms plugin <= 2.12.5 - Insecure Direct Object References (IDOR) vulnerability 0.3%